General
-
Target
41b9b6ea4f212a3b8c2c39f31cf24aa7eac1cb6e958d30397eb2d1657e104d7f
-
Size
11.7MB
-
Sample
240529-l8e4zabb4s
-
MD5
bb9d24e1ce2fd242fcfaa08fd15e15d8
-
SHA1
55ad467f46db5838ae5870313c274b24d628ab1b
-
SHA256
41b9b6ea4f212a3b8c2c39f31cf24aa7eac1cb6e958d30397eb2d1657e104d7f
-
SHA512
6a3eb9fb26895b4e1ce169d0a1974bab81afce08fa3f2eabd3ba99948f3a7dbbc07c05275be41ce300d24f7e174d75e951aeb25734a7ff864e0e8dbc17b3105f
-
SSDEEP
196608:KiINy2LkMa4adWhxSd/FUpoWyKAozKY4TPLKAouKn:hjdWxu/mpodKACXCzKATY
Static task
static1
Behavioral task
behavioral1
Sample
41b9b6ea4f212a3b8c2c39f31cf24aa7eac1cb6e958d30397eb2d1657e104d7f.exe
Resource
win7-20240508-en
Malware Config
Targets
-
-
Target
41b9b6ea4f212a3b8c2c39f31cf24aa7eac1cb6e958d30397eb2d1657e104d7f
-
Size
11.7MB
-
MD5
bb9d24e1ce2fd242fcfaa08fd15e15d8
-
SHA1
55ad467f46db5838ae5870313c274b24d628ab1b
-
SHA256
41b9b6ea4f212a3b8c2c39f31cf24aa7eac1cb6e958d30397eb2d1657e104d7f
-
SHA512
6a3eb9fb26895b4e1ce169d0a1974bab81afce08fa3f2eabd3ba99948f3a7dbbc07c05275be41ce300d24f7e174d75e951aeb25734a7ff864e0e8dbc17b3105f
-
SSDEEP
196608:KiINy2LkMa4adWhxSd/FUpoWyKAozKY4TPLKAouKn:hjdWxu/mpodKACXCzKATY
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-